Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Selected coverage
BlueHammer Shatters Version Scanning: The Same Defender Can Be Harmless or Fatal
Qualys published a full technical analysis of BlueHammer (CVE-2026-33825) on October 21, 2026, an eight-stage local privilege escalati…
US Air Force Pilots Bought USB Drives From Kabul Markets for Mission Planning in Afghanistan
A former Air Force IT security chief reveals that pilots in the early 2000s purchased USB drives from local Afghan vendors to move mis…
PEERSTITCH: Malware Turns FortiGate Firewalls Into Espionage Platforms
Unit 42 describes PEERSTITCH, malware that embeds itself in FortiGate system daemons. The investigation links the intrusion to FortiMa…
CenterPoint: Data of 1 Million Texans Exposed, No Customer Notice Issued
The Texas Attorney General confirms a CenterPoint Energy breach affecting 1,062,060 residents, compromising names, addresses, Social S…
Cisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
Cisco fixes CVE-2026-76519 in Secure Email Gateway: CVSS 9.8 and active exploitation. A crafted email attachment can enable commands w…
AhsayCBS Under Attack: From a Java Boolean to SYSTEM-Level RCE
Two vulnerabilities in AhsayCBS enable RCE as SYSTEM/root via an attacker-controlled JSON flag. Active exploitation began October 7 wi…
Hirudo: The Trojan That Deceives Banking Apps From Within by Replacing Them With Patched Copies
Hirudo marks a paradigm shift in Android malware: no more overlays, but complete replacement of the banking app with a patched copy th…
Vghost: Tencent's AI Finds Linux Kernel vhost Flaw in Two Hours
CVE-2026-74580, dubbed Vghost, is a Linux kernel vhost subsystem vulnerability discovered with Tencent's Corvus AI multi-agent system.…
471 Million Breach Notices, But Only 24% Say How It Happened
In the first half of 2026, U.S. residents received 471.2 million data breach notifications, surpassing the full-year 2025 total of 297…
FBI Arrests Ransomware Negotiator: Industry Under Scrutiny
Edward Dubrovsky, 54, was arrested by the FBI in Pennsylvania on Oct. 8, 2026, on extortion conspiracy charges. The case puts the rans…
CVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
A heap buffer overflow in Ghostscript's JPEG 2000 decoder enables unauthenticated remote code execution through malicious PDFs. The bu…
October 2026 Patch Tuesday: 1,413 CVEs and the 'Risk Cohort' Stress Test
Microsoft shipped its largest Patch Tuesday ever on October 13, 2026 — 1,413 CVEs. Three zero-days demand immediate attention, includi…